818 matches found
CVE-2026-77393 Inductive Automation Ignition Incorrect Default Permissions
In Ignition 8.1.53 and earlier, the Gateway "Create Project Roles" setting shipped blank, which permitted any authenticated user to create projects if they can execute gateway scripts. Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3...
CVE-2026-77393
Inductive Automation Ignition versions 8.1.53 and earlier ship with a blank default in the Gateway "Create Project Role(s)" setting, allowing any authenticated user who can execute gateway scripts to create projects . Successful exploitation could compromise the integrity and availability of the ...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2026-18273 Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability
Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...
CVE-2026-18273
CVE-2026-18273 is a local privilege escalation vulnerability in the Kenwood DNR1007XR car audio/navigation unit. The root cause is incorrect default permissions on a directory used as the USB filesystem mount point , allowing a physically present attacker with low-privileged code execution to esc...
EUVD-2026-63420
Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...
CVE-2026-50602
CVE-2026-50602 — Planet9 : A vulnerability arises from incorrect file permissions on an application executable used by the Planet9 background service. The service runs with SYSTEM privileges, while the executable grants excessive permissions to non-administrative users. An authenticated local use...
CVE-2026-19893
A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this...
CVE-2026-19893
The CVE-2026-19893 entry affects D-Link DIR-842 (firmware 2.01.B04) via the vsftpd component, specifically manipulating the /etc/vsftpd.conf file to cause incorrect default permissions. The vulnerability is exploitable remotely with high attack complexity and low exploitability assessment, though...
PT-2026-72888
Name of the Vulnerable Software and Affected Versions D-Link DIR-842 version 2.01.B04 Description A flaw exists in the vsftpd component within the /etc/vsftpd.conf file. This issue allows for remote manipulation that results in incorrect default permissions. The attack is characterized by high...
CVE-2026-19841
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...
CVE-2026-19841
CVE-2026-19841 affects TRENDNET TEW-813DRU running 1.01b01. The flaw involves an unknown function of the component vsftpd, specifically the file /etc/vsftpd.conf, causing incorrect default permissions. The attack is described as remote and requires a high degree of complexity to succeed. Exploita...
EUVD-2026-58718
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...
CVE-2026-63700
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
PT-2026-72053
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...
CVE-2025-0046
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...
CVE-2026-63522
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...